Your company has 10 Active Directory domain controllers spread across multiple WAN links. All users authenticate to Active Directory. Each link has substantial network bandwidth to support all mission-critical applications. The firewall's management plane is highly utilized.
Given the scenario, which type of User-ID agent is considered a best practice by Palo Alto Networks?
- Windows-based agent on a domain controller
- Captive Portal
- Citrix terminal server agent with adequate data-plane resources
- PAN-OS integrated agent
Reveal Solution Next Question